In the Claims: 

Please cancel claims 1-24. Please add new claims 25-49. The claims are as follows: 
1-24. (Canceled) 

25. (New) A method for recording server authentication information, comprising: 

establishing, by a first server of a plurality of servers in a federated computing environment, 
a trusting relationship between the first server and a second server of the plurality of servers; 

after said establishing the trusting relationship, obtaining by the first server an authentication 
policy of the second server, wherein an authentication policy for each server of the plurality of 
servers is defined as at least one rule of each server for authenticating users of the federated 
computing environment; and 

after said obtaining the authentication policy of the second server, registering by the first 
server the authentication policy of the second server within the first server. 

26. (New) The method of claim 25, wherein said establishing the trusting relationship comprises 
exchanging, by the first server, an electronic certificate of the first server with an electronic 
certificate of the second server in accordance with a Public Key Infrastructure (PKI) method. 

27. (New) The method of claim 25, wherein said obtaining the authentication policy of the second 
server comprises accessing the authentication policy of the second server from a profile table 
prepared by an administrator of the second server. 
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28. (New) The method of claim 25, wherein the at least one rule includes a number of alphabetic 
characters of a user identification (ID), a number of numeric characters of the user ID, a data size for 
fingerprint authentication, a data size for voice print authentication, and combinations thereof. 

29. (New) The method of claim 25, wherein said registering the authentication policy of the second 
server comprises registering the authentication policy of the second server in an authentication policy 
table of the first server, wherein the authentication policy table of the first server comprises an 
authentication policy of each server of the plurality of servers registered therein. 

30. (New) The method of claim 29, wherein the authentication policy table of the first server further 
comprises: a server address of each server registered therein; and a relative priority of each server 
of a group of servers having a same authentication policy in the authentication policy table. 

31. (New) The method of claim 29, wherein the authentication policy of the second server is 
identical to an authentication policy of the first server, wherein a first common identifier (ID) exists 
in an authentication information Lightweight Directory Access Protocol (LDAP) of the first server 
and in an authentication information LDAP of the second server, wherein the first common user ID 
is used by a first user in the first server and by a second user in the second server such that the second 
user differs from the first user, and wherein the method further comprises: 

after said registering the authentication policy of the second server, registering by the first 
server the first common user ID in a exceptional ID table of the first server, wherein the exceptional 
ID table of the first server stores common user IDs and an indication of one or more servers 
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associated with each common user ID stored in the exceptional ID table of the first server. 

32. (New) A system comprising a computing system adapted to perform the method of claim 24 via 
execution of a computer program on a processor of the first server, wherein the computer program 
is stored on a computer readable storage medium of the first server, and wherein the computing 
system comprises the federated computing environment. 

3 3 . (New) A computer readable storage medium comprising a computer program adapted to perform 
the method of claim 24 by being executed on a processor of the first server. 
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34. (New) A method for registering new user authentication information of a new user, comprising: 

accepting, by a first server of a plurality of servers in a federated computing environment, 
the new user authentication information, wherein the new user authentication information does not 
exist in an authentication information Lightweight Directory Access Protocol (LDAP) of the first 
server for the new user; 

after said accepting, verifying by the first server that the new user authentication information 
conforms to an authentication policy of the first server, wherein an authentication policy for each 
server of the plurality of servers is defined as at least one rule of each server for authenticating users 
of the federated computing environment; and 

after said verifying, registering by the first server the new user authentication information in 
the authentication information LDAP of the first server. 

35. (New) The method of claim 34, wherein said verifying comprises using a profile table prepared 
by an administrator of the first server, wherein the profile table describes the authentication policy 
of the first server. 

36. (New) The method of claim 34, wherein after said verifying and before said registering the new 
user authentication information, the method further comprises: 

identifying, by the first server, a second server of the plurality of servers such that an 
authentication policy of the second server is identical with the authentication policy of the first 
server, wherein a first common identifier (ID) exists in an authentication information Lightweight 
Directory Access Protocol (LDAP) of the first server and in an authentication information LDAP of 
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the second server, and wherein the first common user ID is used by a first user in the first server and 
by a second user in the second server such that the second user differs from the first user; and 

after said identifying the second server, registering by the first server the first common user 
ID in a exceptional ID table of the first server, wherein the exceptional ID table of the first server 
stores common user IDs and an indication of one or more servers associated with each common user 
ID stored in the exceptional ID table of the first server. 

37. (New) The method of claim 36, wherein said identifying comprises using an authentication 
policy table of the first server to identify the second server, wherein the authentication policy table 
of the first server comprises an authentication policy of each server of the plurality of servers 
registered therein. 

38. (New) The method of claim 37, wherein the authentication policy table of the first server further 
comprises a server address of each server registered therein. 

39. (New) The method of claim 37, wherein the authentication policy table of the first server further 
comprises a relative priority of each server of a group of servers having a same authentication policy 
in the authentication policy table. 

40. (New) A system comprising a computing system adapted to perform the method of claim 34 via 
execution of a computer program on a processor of the first server, wherein the computer program 
is stored on a computer readable storage medium of the first server, and wherein the computing 
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system comprises the federated computing environment. 

4 1 . (New) A computer readable storage medium comprising a computer program adapted to perform 
the method of claim 34 by being executed on a processor of the first server. 
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42. (New) A method for authenticating a user, comprising: 

receiving, by a first server of a plurality of servers in a federated computing environment, 
an access request from the user to access the federated computing environment, wherein the first 
server comprises an authentication policy table, wherein the authentication policy table of the first 
server comprises an authentication policy of each server of the plurality of servers registered therein, 
and wherein an authentication policy for each server of the plurality of servers is defined as at least 
one rule of each server for authenticating users of the federated computing environment; 

after said receiving the access request, receiving by the first server input authentication 
information from the user; 

obtaining, by the first server, a server address of a second server having an authentication 
policy that matches an authentication policy of the first server; 

transmitting, by the first server to the second server via the server address of a second server, 
the input authentication information; 

after said transmitting the input authentication information to the second server, receiving 
by the first server from the second server a notification that the second server has successfully 
authorized the user; and 

after said receiving the notification that the second server has successfully authorized the 
user, permitting the user to access the federated computing environment, wherein said permitting is 
performed by the first server. 

43. (New) The method of claim 42, wherein at least one additional server has an authentication 
policy that matches an authentication policy of the first server, wherein said obtaining the server 
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address of the second server comprises selecting the second server rather than selecting any server 
of the at least one additional server because a relative priority of the second server in the 
authentication policy table of the first server is a higher relative priority than is a relative priority of 
each server of at least one additional server in the authentication policy table of the first server. 

44. (New) The method of claim 42, wherein before said transmitting the input authentication 
information to the second server, the method further comprises: 

determining, by the first server, that a user identification (ID) of the user is not in an 
exceptional ID table of the first server, wherein the exceptional ID table of the first server stores 
common user IDs and an indication of one or more servers associated with each common user ID 
stored in the exceptional ID table of the first server. 

45. (New) The method of claim 42, wherein after said transmitting the input authentication 
information to the second server and before said permitting the user to access the federated 
computing environment, the method further comprises: 

receiving by the first server from the second server a token that may be used by the user to 
access the federated computing environment; and 

sending, by the first server, the token to the user. 

46. (New) The method of claim 45, wherein the token is a credential and a cookie. 

47. (New) The method of claim 45, wherein the token is a Security Assertion Markup Language 
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(SAML) token. 

48. (New) A system comprising a computing system adapted to perform the method of claim 42 via 
execution of a computer program on a processor of the first server, wherein the computer program 
is stored on a computer readable storage medium of the first server, and wherein the computing 
system comprises the federated computing environment. 

49 . (New) A computer readable storage medium comprising a computer program adapted to perform 
the method of claim 42 by being executed on a processor of the first server. 
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